$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json) Hash identifier: bXDGx/YTQcYUNU5wLgwbCr2nJQxgt09Hgzq4L10tTdo= Subject key identifier: 74:F7:85:3E:8D:69:EE:A2:E7:C8:2A:E5:74:0B:2D:9A:92:61:C6:88 Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft Manifest number: 01EB Signing time: Sun 15 Jun 2025 01:51:14 +0000 Manifest this update: Sun 15 Jun 2025 01:51:13 +0000 Manifest next update: Sun 22 Jun 2025 01:51:13 +0000 Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: VMGlqpBRFwDdoyveg2e+fAtu9OP4jTLg7PBg4qWvFiQ=) 2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: JoMqVSrjZm4JfXMaz6xrPhG5LHTOXjmhXw4j9hZGE8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A Validity Not Before: Jun 15 01:51:13 2025 GMT Not After : Jun 22 01:51:13 2025 GMT Subject: CN=684e2711-de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:e7:27:1e:24:47:9d:e0:e7:4f:ec:7f:5f: 6b:2e:95:f5:85:3c:fc:e9:5a:ee:79:1a:ff:4b:1d: 05:3c:c9:57:31:2d:b8:ff:d3:33:a8:3a:a0:ee:1e: 91:90:4f:ba:b1:40:6f:27:77:03:43:e0:b2:c8:fe: 17:3a:59:50:7e:bc:f2:df:0c:04:06:fc:c2:ff:a0: 5e:91:04:89:5d:fb:38:6d:47:c0:76:f4:a5:c4:87: 75:52:b9:29:dd:76:52:0f:e5:a1:c3:5c:ed:4a:19: cb:35:81:bf:52:28:87:14:b9:c3:be:dd:47:f6:2d: ab:ff:69:6d:a5:1f:42:86:46:e0:72:58:22:ae:ef: 9f:1f:c1:56:b7:3b:91:00:d3:88:b1:6f:96:32:a1: bd:09:52:63:a1:ae:af:70:d1:fe:48:a6:20:37:20: c0:aa:f9:d3:9c:c3:53:14:48:9b:00:f0:5d:e0:24: dc:13:f9:ab:61:50:30:ca:d7:21:98:d3:f3:3e:10: d8:2f:bb:01:0b:dc:7b:71:ca:5e:a4:b3:10:53:6c: a6:10:f1:8c:ab:e2:da:a1:8d:73:b9:5d:eb:3a:df: 3b:05:c7:ee:85:43:d7:0f:8f:64:b4:22:2a:64:37: 10:26:08:c6:ea:83:cb:bf:89:01:49:94:d6:ca:16: 5c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:85:3E:8D:69:EE:A2:E7:C8:2A:E5:74:0B:2D:9A:92:61:C6:88 X509v3 Authority Key Identifier: keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2d:a9:06:6b:4e:a7:db:4e:a1:58:00:de:23:ab:f9:dd:7d: c8:1d:b6:e8:a3:28:a4:81:03:67:0f:e1:b3:f6:0f:53:96:9c: de:35:58:56:4c:23:00:e5:e5:2c:e1:aa:c5:d6:37:14:5b:7e: ec:e6:bd:5b:f4:1d:88:92:66:b7:4f:3f:ed:15:a4:27:d2:57: 2f:27:90:10:dd:06:58:2d:8d:c5:a9:ab:30:11:5c:41:af:2d: d4:57:7a:86:b3:d5:32:44:e8:50:04:ff:0d:a7:a0:09:06:16: 32:df:ce:c4:94:73:6a:95:69:4e:b5:8e:1f:9c:15:3d:86:13: e3:77:71:7f:9b:57:9e:ad:cf:ac:71:f6:1f:bf:53:83:b4:43: 43:d2:d9:13:10:88:9e:e0:8a:66:a8:01:ec:bb:e3:90:fc:71: fa:3b:95:71:70:1b:21:f9:e3:bf:3b:fb:c0:51:5f:29:88:e3: 5b:e6:5e:30:ab:8d:35:bc:7a:4e:93:7d:ad:32:ca:ba:b7:af: e6:1f:2d:f0:4a:c9:48:d6:60:7d:44:77:aa:02:8a:60:d4:eb: 2b:4c:a6:97:e7:49:85:e3:e5:2b:e2:6e:7d:bc:6f:2d:f6:d8: 9b:1e:9d:e4:2e:9d:03:56:61:34:05:e4:46:f7:25:a6:89:06: 44:60:5c:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQTcxMTAvBgNVBAUTKEZGNUQxMzJCQzY2QUFBMkJCQ0Y2NUMzRTVGRTg5QTBD MzcxRDhCM0EwHhcNMjUwNjE1MDE1MTEzWhcNMjUwNjIyMDE1MTEzWjAYMRYwFAYD VQQDEw02ODRlMjcxMS1kZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2/nJx4kR53g50/sf19rLpX1hTz86VrueRr/Sx0FPMlXMS24/9MzqDqg7h6R kE+6sUBvJ3cDQ+CyyP4XOllQfrzy3wwEBvzC/6BekQSJXfs4bUfAdvSlxId1Urkp 3XZSD+Whw1ztShnLNYG/UiiHFLnDvt1H9i2r/2ltpR9Chkbgclgiru+fH8FWtzuR ANOIsW+WMqG9CVJjoa6vcNH+SKYgNyDAqvnTnMNTFEibAPBd4CTcE/mrYVAwytch mNPzPhDYL7sBC9x7ccpepLMQU2ymEPGMq+LaoY1zuV3rOt87BcfuhUPXD49ktCIq ZDcQJgjG6oPLv4kBSZTWyhZc/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHT3hT6N ae6i58gq5XQLLZqSYcaIMB8GA1UdIwQYMBaAFP9dEyvGaqorvPZcPl/omgw3HYs6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBNy8yRDk5MUNEMDU5 OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFpdTg5bHctWC1pYUREY2Rp em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18xMFRLOFpxcWl1ODlsdy1YLWlhRERjZGl6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUZBNy8yRDk5MUNEMDU5OUYxMUVEQjk2N0FFMzlDNEY5QUUwMi9fMTBUSzhacXFp dTg5bHctWC1pYUREY2Rpem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwLakGa06n206hWADeI6v53X3IHbbooyikgQNnD+Gz9g9TlpzeNVhW TCMA5eUs4arF1jcUW37s5r1b9B2Ikma3Tz/tFaQn0lcvJ5AQ3QZYLY3FqaswEVxB ry3UV3qGs9UyROhQBP8Np6AJBhYy387ElHNqlWlOtY4fnBU9hhPjd3F/m1eerc+s cfYfv1ODtEND0tkTEIie4IpmqAHsu+OQ/HH6O5VxcBsh+eO/O/vAUV8piONb5l4w q401vHpOk32tMsq6t6/mHy3wSslI1mB9RHeqAopg1OsrTKaX50mF4+Ur4m59vG8t 9tibHp3kLp0DVmE0BeRG9yWmiQZEYFzf -----END CERTIFICATE-----Generated at Sun Jun 15 07:57:21 2025 by rpki-client